Skip to main content
The First Step
Sep 16, 2019 8:27 PM UTC
Question

SIP Attack

Every 3 to 5 minutes I am receiving a call that is not being recorded on the ring central server. It is even a blocked number. It usually comes in as 8889207896. Earlier in the day I think it cam in as SIP vicious 101


I believe this may be what is called a SIP attach directly to my Polycom vvx 201.


Does anyone have a resolution for this type of problem. Ringcentral support had no solution and my ISP had no solution. Is there a way to block this fake call inside the polycom phone?

5 replies

Community Manager
Sep 16, 2019 8:51 PM UTC
Hi Greg, 

Check out this KB article on how to lock down the SIP ports on the router. 
The First Step
Sep 16, 2019 9:10 PM UTC
Thanks Jessica.  I saw that one earlier but my phone is not going through my router. 
The First Step
Sep 16, 2019 10:11 PM UTC
Its sounds like your phone is exposed to direct inbound internet connections. That is dangerous and you need to get the phone behind a firewall or at the very least behind your providers router/modem without any inbound ports open to the phone(s).
New Participant
Apr 10, 2020 12:54 AM UTC
In our situation, it is the opposite: our RingCentral phones will make outbound calls every few minutes to a recently dialed number. It will go on for hours until you yank the power off the phone. Has anyone experienced this before? 
New Participant
Jul 27, 2022 7:18 PM UTC

I've read the KB Article and we all work from home. Where do I enter these ip addresses? Our phones are set up through Ringcentral's website, we don't use RIngCentral cloud. Help?